2FA questions and answers

I’m already using two-step verification, so do I need this?

Two-step verification (2SV) is an older system that’s also designed to offer extra protection, but Apple says 2FA is better. To migrate, first go to Security at appleid.apple.com and click Edit > Turn Off 2SV.

Does my trusted phone number have to be an iPhone?

No; it can even be a landline. When you add a new number to your Apple ID (at appleid.apple.com or System Prefs > iCloud > Account Details > Security), you’ll be asked whether to send verification codes to it using SMS or voice calls.

How do I check which devices are trusted and can receive codes?

On a Mac that’s signed in to your iCloud account, go to System Prefs > iCloud > Account Details > Devices. Select a device and check its description on the right. You can revoke a device’s access to your ID if it’s no longer in your possession.

What if 2FA is too much bother?

Except for some accounts created using macOS 10.12.4 or iOS 10.3 or later, 2FA can be disabled, but your ID will then only be protected by a password and security questions.

Someone else has enabled 2FA on my account. What should I do?

You’ll get a confirmation email. Click “Turn Off 2FA” in it to revert your Apple ID’s security to your old settings. The link works for two weeks. Change your password at

appleid.apple.com and use the option there to sign out all devices and sites that are using your ID.